Run the Global daemon without admin privileges

Global services are installed by default with the built-in Network Service account, which has fewer privileges than Local System. Override the default account by including username and password in the install command. This can be a standard user or a built-in Windows account (Local System, Network Service, Local Service). Built-in accounts do not require a password.

Modern security practices recommend running applications or services with the minimum necessary privileges. A global daemon can operate without admin rights if its account has the required permissions, which depends on the endpoint binding used:

• NetTcp Binding

• BasicHttp/WsHttp Binding